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The quantum capacity of a quantum channel is always smaller than the capacity of the channel 
for private communication. However, both quantities are given by the infinite regularization of 
respectively the coherent and the private information. Here, we construct a family of channels for 
which the private and coherent information can remain strictly superadditive for unbounded number 
of uses. We prove this by showing that the coherent information is strictly larger than the private 
information of a smaller number of uses of the channel. This implies that even though the quantum 
capacity is upper bounded by the private capacity, the non-regularized quantities can be interleaved. 

From an operational point of view, the private capacity can be used for gauging the practical value 
of quantum channels for secure communication and, consequently, for key distribution. We thus 
show that in order to evaluate the interest a channel for this task it is necessary to optimize the 
private information over an unlimited number of uses of the channel. 


How well is it possible to characterize the resources 
available to transmit information? In classical informa¬ 
tion theory, this proves to be fully within our computa¬ 
tional abilities: given a description of a channel, answer¬ 
ing the question about its capacity to convey information 
to the receiver is straightforward. However, our world is 
inherently quantum and when one turns to the channels 
which transmit quantum information - the amount of re¬ 
sources required to compute their capacities is unknown 
at best. To compute a number of different types of ca¬ 
pacity of the quantum channel, defined as regularized 
quantities m, it is necessary to perform an unbounded 
optimization over the number of the copies of the chan¬ 
nel. The action of a channel J\f A ^ B can be defined via 
an isometry V A ^ BE : N A ^ B (p) = tr E VpV*, and its 
complementary channel is N A ^ E (p) = tr sVpV*. In the 
following, we will omit the register superscripts when it 
does not add to clarity. 

The quantum and classical capacity of a channel are 


given by: 


Q(AQ= lim -QW(Af), 

n—too Tl 

(i) 


C{N) = lim -C (1) (A0 

n—too Tl 

(2) 

where 


Q (1) (A?) = ma xH(B) - H(E), 

p A 

(3) 


C (1) (A0 = max/(X;H). 
pE TZ 

(4) 


The optimization of the quantum capacity is performed 
over all valid states on the input register A while the 
optimization of the classical capacity is performed over 
TZ the set of classical-quantum states of the form p XA = 
J2 x Px\ x ){x\ x (g> p A . Where A' is an auxiliary classical 
register, H is the von Neumann entropy and I(X;B) is 
the quantum mutual information. 

From the above expressions it follows that one has to 
optimize over an infinite number of copies of the channel 


in order to compute its capacity. Do we have to resort 
to the regularized expression in order to compute the 
capacity of a quantum channel? It has recently been 
shown that at least in the case of the quantum capacity 
this is unavoidable nm even when we attempt to answer 
the question of whether the channel has any capacity at 
all [B], For the classical capacity, which is known to be 
superadditive for two uses of the channel [7], there is 
some evidence that ultimately the regularization might 
not be required mm- 

Arguably, the biggest practical success of quantum in¬ 
formation theory to date is the possibility of quantum 
key distribution (QKD). QKD allows two distant parties 
to agree on a secret key independent of any eavesdrop¬ 
per. The required assumptions are: access to a quantum 
channel with positive private capacity and the validity 
of quantum physics m • On the other hand, key distri¬ 
bution is a primitive that can only be implemented with 
classical resources if one is willing to constrain the power 
of the eavesdropper. Even though there exist practical 
QKD schemes which enable secure communication over 
large distances with high key rates mm, some of the 
fundamental questions about the capacity to transmit se¬ 
cure correlations remain unanswered. 

There are essentially two quantities which describe the 
ability of the channel to send secure messages to the re¬ 
ceiver. The first one, is called private capacity V. It 
has a clear operational interpretation as the maximum 
rate at which the sender, Alice, can send private classi¬ 
cal communication to the receiver, Bob. It is defined as 
follows: 

V{N) = lim (5) 

n—too Tl 

That is the private capacity is given by the regularization 
of (A/"), the private information of the channel, which 

is given by 

V {1 \U) = max/(X;B) -I(X-E). (6) 
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One can view private capacity as the optimal rate of reli¬ 
able communication keeping Eve in a product state with 
Alice and Bob. 

This capacity characterizes the optimal rates of QKD. 
A better understanding of this quantity would allow to 
evaluate precisely the usefulness of communications chan¬ 
nels for practical QKD links. For instance, the private 
capacity of Gaussian channels m remains open. Be¬ 
yond the pure loss channel (lbj only lower bounds on the 
private information of a single use are known. 

In the case of private capacity, the eavesdropper, Eve, 
is given a purification of the channel output which means 
that she is as powerful as it is allowed by quantum me¬ 
chanics. However, this setting may be too restrictive for 
practical applications given the current state of the art 
in quantum information processing. A natural relaxation 
of this strong security requirement is to assume that Eve 
obtains information about the key by performing a mea¬ 
surement on her state. This security requirement is re¬ 
flected in the second quantity, locking capacity C. By 
C we denote all the recently introduced locking capaci¬ 
ties im of a quantum channel. They are defined by the 
optimal rate of reliable classical communication requir¬ 
ing Eve to have vanishing accessible information about 
the message. This difference in the security criterion has 
striking consequences. For instance it implies that some 
channels that have no private capacity have close to max¬ 
imum locking capacity |18| and for some relevant classes 
of channels locked communications can be performed at 
almost the classical capacity rate [T9] . The following up¬ 
per bound is known for the locking capacities: 

C(Af) < C U (Af) = sup (7) 

n n 

where Cu\ that we will call the locking information, is 
given by: 

£.W(A0 = max/(A; B) - I acc (X;E). (8) 

pE 7c 

The accessible information 7 acc (A';E) = maxr7(A;K), 
where T is the set of all POVMs on E. 

Despite the significance of the private and locking in¬ 
formation, we still understand very little about its be¬ 
haviour when the communication channel is used many 
times. Authors in EM provide evidence that V^(Af) 
is superadditive for a small finite number of channel uses, 
although the magnitude of this effect is quantitatively 
very small. Recently, it has been shown the existence of 
two quantum channels A/i,A/2 with C(A/i) < 2,V(Af2) = 
0 for which V(Ni <S> A/ 2 ) > 1/2 log d, where d is the di¬ 
mension of the output of the joint channel [22] • This 
example shows that the private capacity is a superaddi¬ 
tive quantity (this was also proved in |23[ using a different 
construction). 

Even less is known about the locking capacity. It fol¬ 
lows trivially that is sandwiched between the classi¬ 
cal information and the private information m- 

7> (1) (A0 < C^\N) < C (1) (A0- (9) 


Here we show that private information can be strictly 
superadditive for an arbitrarily large number of uses of 
the channel. More precisely, we prove the following the¬ 
orem: 

Theorem 1. For any n there exists a quantum channel 
M n such that for n > k > 1: 

r® k )<^Q (1 \Af® k+1 ). (10) 

This proves that entangled inputs increase the private 
information of a quantum channel and this effect persists 
for an arbitrary number of channel uses. As a bonus, we 
obtain a qualitatively different proof for the unbounded 
superadditivity of the coherent information [B]. 

We now introduce the key components of our construc¬ 
tion which are required to prove Theorem |T| 

Main construction: switch channel. We first in¬ 
troduce switch channels: 

AfSA^SB^SAj = ^ P x s ^ s <s>U l A ^ B (p SA ). (11) 

i 

A switch channel consists of two input registers S and A 
of dimensions d and n respectively. Register S is mea¬ 
sured in the standard basis and conditioned on the mea¬ 
surement outcome i a component channel A/) is applied 
to the second register. The computation of V^(Af) and 
Cu\M) when A f is of the form 0 can be simplified; it 
suffices to restrict inputs to a special form. The equiva¬ 
lent result for the quantum capacity was proved in [24] . 

Lemma 1. Consider a switch channel M SA ^ SB and let 
T = {p: p = Y, x P=\ x )( x \ X ® l s )( s | S ® Px}- Then: 

1. "P (1) (A0 = maxi< s< „'P (1 )(A4), 

2. d'uH A/ - ) = maxi< s<n (A//). 

Both 4*4)(A7) and Cu\Af) can be achieved by some p £ 

T. 

Proof. The channel complementary to a switch channel is 
also a switch channel with component channels {A/) c }™ =1 
complementary to {A/i}" =1 [Bj. We denote the output 
systems of the complementary channel by S and E. Let 
p £ A. be the input state that maximizes C^\N). The 
following chain of inequalities holds: 

I(X-,BS)^I acc (X-ES) (12) 

= 5> s (7(A; B\S = s) - 7 acc (A; E\S = s)) (13) 

S 

< max (/(A; B\S = s) - 7 acc (A; £|S = a)) (14) 

<max4 1 )(A4). (15) 

S 

The first equality follows because S is a classical system. 
The first inequality follows by choosing the value of s 
which maximizes the difference between the mutual and 
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FIG. 1. The channel has two input registers the control regis¬ 
ter S and the data register A. The control register is measured 
in the computational basis and depending on the output ei¬ 
ther the erasure channel d or n copies of the d-dimensional 
rocket channel are applied. 


the accessible information. The second one since the dif¬ 
ference between the between the mutual information to 
the receiver and the accessible information to the envi¬ 
ronment is upper bounded by the locking information of 
the channel N s . This upper bound is achievable by an 
input state of the form a XSA = J2 x Px\ x )( x \ ® |s)(s| ® p x 
where trs(er ASA ) is the state that achieves the locking 
information of channel J\T S . Finally note that cr XSA £ T. 

The proof for the private capacity is analogous and 
follows by replacing f acc (X; E) with I(X- E). □ 

There are two types of channels which we will use in 
place of A/i. The first channel is the erasure channel: 

£pX B (pa) = (! ~P)PB +p\e){e\ B (16) 

where |e)(e| is the erasure flag and d the dimension of 
the input register A. For p < 1/2 the erasure chan¬ 
nel is degradable and Q(£ p , d ) = P{£ p ,d) = max{0, (1 — 
2 p) log d}, and C(£ p , d ) = (1 - p) log d. 

The locking information of the erasure channel is cur¬ 
rently unknown. We might upper bound it by its classi¬ 
cal capacity but that gives a too loose bound. A slightly 
tighter upper bound is obtained in the following lemma 
(the proof can be found in the Supplemental material): 

Lemma 2. Let p < 1/2, the locking information of £ pd 
is upper-bounded by 

£ { u ] (£ P ,d) < (1 - p) log d - pyd log e, (17) 

where 7 d := In d — Ylt -2 an d li m d->oo 7 d = 7 is the 
Euler’s constant. 


Lemma 3. For all quantum channels J\f 


C (1) (A/■»£«?) = C (1) (A0 + nC^{£ p4 ). (18) 


Proof. It is trivial that the left hand side of Eq. 18 


is 


equal or greater than the right hand side. In order to 
prove the converse inequality consider the following chain 
of inequalities: 


CW(M®£f2) = cV{M®£ p4 ) (19) 

= maxI{X- 1 B 1 B 2 ) (20) 

p 

= max(l -p)I{X-,B 1 A 2 )+pI(X;B 1 ) (21) 

p 

< (1 ~ p)C {1 \M ® I) + pC w (M) (22) 

= C (1 ^ (M) + (1— p) log d (23) 

= C (1 ^(A7) +n(l — p)logd. (24) 


The first equality follows by identifying M with J\f g 
£ p d~ 1 - We let A \, A 2 and B ll B 2 be the input and out¬ 
put of M. and £ p ^ d respectively. The second equality is 
just the definition of the classical information (see Eq. 
[ 2 ]). The third equality breaks the mutual information 
depending on the erasure channel transmitting or eras¬ 
ing. The inequality follows by maximizing each of the two 
mutual informations individually. The fourth inequality 
follows by taking into account that the classical infor¬ 
mation of the identity is additive and the last one by 
applying the same argument recursively for n — 1 times. 

□ 


Intuitively, Lemma [3] states that the erasure channel 
cannot convey more information than an identity channel 
of dimension c? 1_p even in the presence of other channels. 
Furthermore, we can use the classical capacity to obtain a 
trivial bound for the locking and private information. It 
turns out that this trivial bound is tight and is saturated 
by the channel construction that we introduce below. 

The second channel that we use alongside £ p ^ d is a 
d-dimensional ‘rocket’ channel, lZ d [221 • ^ consists of 
two d-dimensional input registers A\ and A 2 and a d- 
dimensional output register B. A\ and A 2 are first sub¬ 
ject to a random unitary and then jointly decoupled with 
a controlled dephasing gate. Then, the contents of A\ be¬ 
comes the output of the channel and the contents of A 2 is 
traced out. Bob also receives the classical description of 
the unitaries which acted on A\ and A 2 . Since dephasing 
occurs after the input registers have been scrambled by 
a random unitary, it is very hard for Alice to code for 
such channel, hence it has a very low classical capacity: 
C(K d ) <2. 

Our switch channel construction has the following 
form: 


Afn, P ,d — Pq ® 7Z d + Pi ® £p,d (25) 


For any quantum channel J\f used alongside £ P)d the That is, it allows Alice to choose between 1Z ^ — 1Z® and 
classical information is additive: d = £ Ptd g £-\ ; a d-dimensional erasure channel 
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padded with a full erasure channel to match the input 
dimension of 1Z d . 

Upper bound. To upper bound the private infor¬ 
mation of A/" n ,p,d we only need to optimize over all the 
possible different choices of 7and £” d . Thus, the up¬ 
per bound for d ) for fc > 1 reads: 


^ (1) (AO = ® TO®*”*) 

< max < max <8(72®*), 

{ 2 kn, 

(2n + (fc — 1)(1 — p) logd). (26) 
(1 — 2p) fc log d 


Superadditivity of First, we present the input 
state such that for j > i uses and for some range of pa¬ 
rameters allows to conclude that the private information 
for j uses is higher than the upper bound (26) for i uses. 
This state has the form: 


j -1 



k -1 



[i] 

kl 





(27) 


where = 1/d j=i I**)Oil- Alice chooses the 

rocket channel and for the remaining j — 1 uses of the 
channel she selects £” d . We denote with superscript [fc] 
the fc-th use of the channel and the subscript ij indicates 
the input register as pictured in Fig. |Tj The state can be 
read operationally as follows: Alice keeps the Ak m reg¬ 
isters and sends A^ k \ through the first input of fc-th 7 Zd 
channel, A^) 2 through the second (which will be subse- 

quently discarded by the channel) and through £ p ,d- 
The remaining inputs do not play any role, so Alice can 
send any pure state a a through £d,i and 72 d ^ for fc > j. 
It is easy to verify that: 

2 (1) P) = (J ~ 1) ) 1 ~ P) log d. (28) 


This immediately gives a lower bound for the locking 
and private information. Now, we are ready to prove 
Theorem [lj 

Proof. Fix d = 2 4 « 2 /(!-2p) and p = Then the 
regularized upper bounds (26) for V (1 1 after fc uses of 
the channel have the form U k = jr, U% = 2ri ( 13 ( fc ~ 1 ) n + 1 ) 
and U k = 4n 2 ; the lower bound (28) after fc + 1 uses of 
the channel has the form Lk+i = . 

Consider the differences D k = — U k + Lk+i for i = 
1,2,3. Then, a simple substitution shows that 77/ = 

26 kn 2 2n 7-)2 2n(fc—13n+l) 7—^3 2(llfc—2)n 2 k a 

k+ 1 fc > U k — fc(fc+1) > ~ fc+1 ' 01 

the differences are positive for n > k > 1. □ 


The results of the theorem indicate that in order to 
compute the exact private capacity of a channel A f it is 
necessary to compute V 11 ' 1 {J\f® n ) for an arbitrary num¬ 
ber of uses n. In addition, we found an example whereby 
for each n and 1 < fc < n having access to one additional 
copy of the channel up to n provides the parties with 
the largest possible gain in the capacity, proportional to 
the output dimension of the channel. Note, that for the 
channel M n ,p,d strict superadditivity of both private and 
coherent information holds for all number of uses of the 
channel up to n. This is markedly different from all previ¬ 
ously known channel constructions which exhibit various 
superadditivity effects. Such constructions exhibited su¬ 
peradditivity for some fixed number of uses of the chan¬ 
nel t versus t + c for some c. Our construction above 
shows that the private and coherent information of the 
same channel can be strictly superadditive for an arbi¬ 
trary number of channel uses. 

Superadditivity of C^\ Now we study the condi¬ 
tions necessary to obtain a similar result for the locking 
information of our channel construction. Some algebra 
shows that the upper bound given by Lemma[2] combined 
with the lower bound given by ( f27| ) do not yield super¬ 
additivity. However, the ensembles used for the upper 
bound of I(X- 1 A) and / acc (X;U) in Lemma [2] are dif¬ 
ferent; in particular for the former we used a discrete 
ensemble of orthogonal states, while the latter bound 
is obtained via the so called Scrooge ensemble [253, i n 
consequence for a given ensemble either Alice should ob¬ 
tain less information or Eve more implying that a bound 
tighter than that of Lemma [2] should hold. In particular, 
if this tighter bound takes the following form: 

Conjecture 1. [Sharper upper bound for £',! j 

£u ] i £ P,d) < (1 - P) log d - pe log d. (29) 

where e > 

The same techniques used in the proof of Theorem [l] 
would allow to prove superadditivity. 

Discussion. In this paper we have constructed a fam¬ 
ily of channels for which the private and coherent infor¬ 
mation can remain strictly superadditive for any number 
of uses of the channel. We are able to prove this result 
by showing that the private information of fc uses of the 
channel is smaller than the coherent information of fc + 1 
uses. That is, both quantities can be interleaved use after 
use for the first n uses of the channel. This shows that 
even though the quantum capacity is upper bounded by 
the infinite regularization of the private information, the 
quantum capacity can be larger than a finite regulariza¬ 
tion of the private information. 

The private and locking capacity of a quantum chan¬ 
nel characterize its ability to convey classical information 
securely with two different security criteria. We proved 
that in order to compute the private capacity it is nec¬ 
essary to consider regularized expressions & Similarly, 
we expect weak locking information to be superadditive. 
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For this to be true with our channel construction a tighter 
bound on the accessible information to the environment 
would be necessary. 

The results shown here raise questions about the prop¬ 
erties that a channel has to verify such that its different 
capacities can be computed exactly using only finitely 
many (preferably only a few) copies of the channel. 
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Appendix A: Proof of Lemma 2 


We denote by U a von Neumann measurement in the 
basis induced by applying unitary U to the computa¬ 
tional basis and by ( H(U ( A)) v the entropy averaged over 
unitaries sampled according to the Haar measure. The 
subentropy of a state p A can be written as: 


Q{A) = {H{U{A)) u -H n loge 


(Al) 


where H n = Y^i=i V* ES- With Eq. Al we obtain the 
following upper bound of the difference between entropy 
and subentropy: 


H{A) - Q(A) = H{A) - (H(U(A)) u + H n log e 
= (H{A)~ H(U(A)) V + H n loge 
< H n log e (A2) 


the inequality follows since a measurement either leaves 
entropy unchanged (measurement in the eigenbasis of the 
state) either increases it. 

For degradable channels the optimization of C u can 
be restricted to pure ensembles [T8], that is, states of 
the form Px\^)(x\ (g> \4>x){4 > x\- If we restrict the opti¬ 
mization to states p of this form the following chain of 
inequalities hold: 

4 1} 0 = max J(A; B) - / acc (X; E) 

P 

= max(l -p)I{X\ A) - p/ acc (X; A) 

p 

< max(l — p)H(A) — pQ(A) 

p 

= max(l — 2 p)H(A) +p(H(A) — Q(A)) 

p 

< (1 - 2p) log d + pH n log e 

= (1 -p) log d - prjd log e. 
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The first inequality follows by bounding the mutual infor¬ 
mation with the entropy of the input and the accessible 
information with the subentropy of the input. Suben¬ 


tropy is known to be a lower bound on the accessible 
information [25]. The second inequality follows from Eq. 

m 


